Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
File: lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft (raw, json)
Hash identifier: VSC27197mPfpK+sgpRa49KHWofdiHtSb2X281CAhuJA=
Subject key identifier: F4:AE:2E:12:CD:F1:17:10:F8:73:31:C4:C7:4B:0F:2A:C3:19:03:98
Authority key identifier: 94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
Certificate issuer: /CN=949ff40831ca66f996c76ea466af49476fecd1ff
Certificate serial: 01A10E4C4281B16B17DA83230FF34938C1EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
Manifest number: 186B
Signing time: Mon 05 Oct 2026 23:00:40 +0000
Manifest this update: Mon 05 Oct 2026 23:00:40 +0000
Manifest next update: Tue 06 Oct 2026 23:00:40 +0000
Files and hashes: 1: UipotQ-uJFFtPyyGfsmm8VGPq_Y.roa (hash: 1ArIsx9oTls8tQ2A71LvIPypaXRgZmQimvwpiodxUUE=)
2: WOZGN68ORC_fjS0NcqSjNDVXKaY.roa (hash: AjRBGSZk8zOXbmkuoK7ZV4c6kcxCjWb+oPTXu10gwFM=)
3: lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl (hash: uQDteYUCp0NuQTygYXVezMriE8DPzHX9SUn0iQc8hLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:4c:42:81:b1:6b:17:da:83:23:0f:f3:49:38:c1:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949ff40831ca66f996c76ea466af49476fecd1ff
Validity
Not Before: Oct 5 23:00:40 2026 GMT
Not After : Oct 6 23:00:40 2026 GMT
Subject: CN=f4ae2e12cdf11710f87331c4c74b0f2ac3190398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:61:b9:3d:e9:ca:b3:c3:ae:17:7c:62:d0:37:
11:5d:d1:b1:cf:f9:0b:bf:cb:a7:30:d4:8f:99:7a:
f7:ac:ea:11:34:5c:0b:49:e3:f3:ce:d2:21:a3:42:
43:3c:c2:a0:18:0f:ab:81:20:14:41:6e:ce:d1:ac:
c2:99:a8:68:8e:cf:e3:3a:ec:1b:61:e0:94:3d:d6:
77:c2:47:29:bf:cc:a5:90:02:5c:d7:c2:23:5e:b4:
ed:25:1a:5f:e7:5b:8c:07:c1:2d:54:b4:93:97:ec:
d3:f4:d6:c1:79:95:1f:8e:ff:89:e9:9f:ff:47:57:
db:eb:90:34:78:d7:20:e4:aa:b9:3e:1d:d4:b5:7e:
c1:39:4b:0b:1c:86:f7:09:bd:79:c2:d6:09:09:29:
99:a4:0f:43:a7:5e:b1:98:2e:2b:92:ec:0b:4e:23:
01:83:70:30:bd:90:47:44:ad:a1:c4:85:15:94:2e:
0d:f9:8f:6c:57:62:a3:78:ce:d3:13:5a:bf:98:47:
09:7c:70:41:a6:01:bc:6a:49:f3:57:35:0b:eb:97:
94:eb:0a:a6:31:17:ee:0c:e9:86:fc:50:3e:bb:b8:
a4:09:e4:23:73:60:d5:70:81:01:e9:4d:38:b2:54:
63:2a:2f:94:0a:b7:5a:8f:7e:fb:e0:3d:6c:c0:97:
f0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AE:2E:12:CD:F1:17:10:F8:73:31:C4:C7:4B:0F:2A:C3:19:03:98
X509v3 Authority Key Identifier:
keyid:94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:48:ff:89:7c:33:99:63:a6:6d:ee:c3:35:7b:c7:89:21:b4:
30:dd:d8:ea:29:97:70:62:be:7a:97:95:e4:ae:58:fc:99:ac:
9f:f7:d2:4b:fa:6f:52:43:26:6a:1b:7f:92:a8:81:19:b8:0d:
5c:0c:78:2f:2f:95:b7:fa:07:49:da:ed:98:09:00:c5:32:c9:
7b:64:25:ef:7a:55:8d:ba:fd:02:42:9e:7c:be:10:cf:11:1f:
1a:13:ec:90:8e:91:3f:ab:82:b0:a3:dc:3d:86:f4:81:c8:d0:
dd:3f:4b:ae:58:7f:be:f7:78:97:f0:84:9e:d2:cf:46:93:74:
32:51:ec:61:39:f2:3f:4d:82:73:05:cf:cf:00:43:e9:28:5a:
12:e7:9e:0a:a7:8f:4b:6c:14:5e:93:41:cf:7a:17:cc:c2:45:
66:5f:08:6d:f7:e3:61:f3:93:c4:71:1f:1b:45:9b:8f:fe:d8:
51:9a:66:85:4a:2d:77:b0:78:23:be:f7:f1:33:71:a4:2f:4f:
2e:9b:05:3a:ae:05:1e:4d:58:1f:19:c1:b2:86:3a:8e:c6:ff:
60:42:29:e7:a1:d8:f1:7b:57:be:16:f2:62:44:dd:79:53:ed:
74:bf:dd:2d:11:69:5a:f5:d9:45:73:7c:63:ad:cf:34:67:f6:
37:4f:80:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 11:36:36 2026 by rpki-client